http://www.kitploit.com/2021/03/threatspec-continuous-threat-modeling.html